Skip to content

Commit

Permalink
Add support for Deny Assignments
Browse files Browse the repository at this point in the history
  • Loading branch information
@dsgouda
dsgouda authored Sep 27, 2018
2 parents e836541 + 0d81ab7 commit ae10de6
Show file tree
Hide file tree
Showing 50 changed files with 16,148 additions and 8,788 deletions.
35 changes: 17 additions & 18 deletions ...on.Tests/SessionRecords/Authorization.Tests.BasicTests/ClassicAdministratorListTests.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,59 +7,58 @@
"RequestBody": "",
"RequestHeaders": {
"x-ms-client-request-id": [
"dd92333f-bad5-4a4d-843f-335bf5d8d25a"
"c661daaa-f979-41bc-b748-b83961bf5ba6"
],
"accept-language": [
"en-US"
],
"User-Agent": [
"FxVersion/4.6.25009.03",
"FxVersion/4.6.26020.03",
"Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.8.0.0"
]
},
"ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"emailAddress\": \"test2@rbacCliTest.onmicrosoft.com\",\r\n \"role\": \"ServiceAdministrator;AccountAdministrator\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/classicAdministrators/10030000930A2D88\",\r\n \"type\": \"Microsoft.Authorization/classicAdministrators\",\r\n \"name\": \"10030000930A2D88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"emailAddress\": \"stefmil@microsoft.com\",\r\n \"role\": \"CoAdministrator\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/classicAdministrators/1003BFFD801C213F\",\r\n \"type\": \"Microsoft.Authorization/classicAdministrators\",\r\n \"name\": \"1003BFFD801C213F\"\r\n }\r\n ]\r\n}",
"ResponseHeaders": {
"Content-Type": [
"application/json; charset=utf-8"
],
"Expires": [
"-1"
],
"Cache-Control": [
"no-cache"
],
"Date": [
"Sat, 10 Mar 2018 00:21:05 GMT"
"Wed, 26 Sep 2018 23:38:38 GMT"
],
"Pragma": [
"no-cache"
],
"Transfer-Encoding": [
"chunked"
],
"Vary": [
"Accept-Encoding",
"Accept-Encoding"
],
"x-ms-request-id": [
"westus2:f566efec-5462-4aae-97d0-f1b3635d87b7"
"westus2:5be735a7-b5b2-4768-8b3b-3ea8a7d600ca"
],
"x-ms-ratelimit-remaining-subscription-reads": [
"14978"
"11999"
],
"x-ms-correlation-request-id": [
"dff26a77-9fe6-49de-a0e3-f50c1e65d99e"
"1b31c57e-5399-4356-9aee-44cbec797f9d"
],
"x-ms-routing-request-id": [
"WESTUS2:20180310T002106Z:dff26a77-9fe6-49de-a0e3-f50c1e65d99e"
"WESTUS2:20180926T233839Z:1b31c57e-5399-4356-9aee-44cbec797f9d"
],
"Strict-Transport-Security": [
"max-age=31536000; includeSubDomains"
],
"X-Content-Type-Options": [
"nosniff"
],
"Content-Length": [
"637"
],
"Content-Type": [
"application/json; charset=utf-8"
],
"Expires": [
"-1"
]
},
"ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"emailAddress\": \"test2@rbacCliTest.onmicrosoft.com\",\r\n \"role\": \"ServiceAdministrator;AccountAdministrator\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/classicAdministrators/10030000930A2D88\",\r\n \"type\": \"Microsoft.Authorization/classicAdministrators\",\r\n \"name\": \"10030000930A2D88\"\r\n },\r\n {\r\n \"properties\": {\r\n \"emailAddress\": \"stefmil@microsoft.com\",\r\n \"role\": \"CoAdministrator\"\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/classicAdministrators/1003BFFD801C213F\",\r\n \"type\": \"Microsoft.Authorization/classicAdministrators\",\r\n \"name\": \"1003BFFD801C213F\"\r\n }\r\n ]\r\n}",
"StatusCode": 200
}
],
Expand Down
75 changes: 75 additions & 0 deletions ...zation.Tests/SessionRecords/Authorization.Tests.BasicTests/DenyAssignmentGetByIdTest.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
{
"Entries": [
{
"RequestUri": "//subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments/43af7d0c-0bf8-407f-96c0-96a29d076431?api-version=2018-07-01-preview",
"EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZWdyb3Vwcy9BenVyZUF1dGh6U0RLL3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9kZW55QXNzaWdubWVudHMvNDNhZjdkMGMtMGJmOC00MDdmLTk2YzAtOTZhMjlkMDc2NDMxP2FwaS12ZXJzaW9uPTIwMTgtMDctMDEtcHJldmlldw==",
"RequestMethod": "GET",
"RequestBody": "",
"RequestHeaders": {
"x-ms-client-request-id": [
"4b488091-dc15-4d90-9fa8-44049f16c163"
],
"accept-language": [
"en-US"
],
"User-Agent": [
"FxVersion/4.6.26020.03",
"Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.8.0.0"
]
},
"ResponseHeaders": {
"Cache-Control": [
"no-cache"
],
"Date": [
"Wed, 26 Sep 2018 23:38:40 GMT"
],
"Pragma": [
"no-cache"
],
"Server": [
"Microsoft-IIS/10.0"
],
"Set-Cookie": [
"x-ms-gateway-slice=productionb; path=/; secure; HttpOnly"
],
"x-ms-request-charge": [
"1"
],
"x-ms-request-id": [
"9a61bea6-c361-4fa0-9f93-4c76e32d6b41"
],
"X-Content-Type-Options": [
"nosniff"
],
"Strict-Transport-Security": [
"max-age=31536000; includeSubDomains"
],
"x-ms-ratelimit-remaining-subscription-reads": [
"11999"
],
"x-ms-correlation-request-id": [
"4656a8d2-a9e6-4e6f-9fa0-8ff59646159e"
],
"x-ms-routing-request-id": [
"WESTUS2:20180926T233840Z:4656a8d2-a9e6-4e6f-9fa0-8ff59646159e"
],
"Content-Length": [
"887"
],
"Content-Type": [
"application/json; charset=utf-8"
],
"Expires": [
"-1"
]
},
"ResponseBody": "{\r\n \"properties\": {\r\n \"denyAssignmentName\": \"AzureAuthzSDK_43AF7D0C-0BF8-407F-96C0-96A29D076431\",\r\n \"description\": \"Test deny assignment for AzureAuthzSDK\",\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"foo/*\"\r\n ],\r\n \"notActions\": [\r\n \"foo/*/read\"\r\n ],\r\n \"dataActions\": [\r\n \"foo/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"scope\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK\",\r\n \"doNotApplyToChildScopes\": false,\r\n \"principals\": [\r\n {\r\n \"id\": \"f8d526a054eb4941ae69ebf4a334d0f0\",\r\n \"type\": \"User\"\r\n }\r\n ],\r\n \"excludePrincipals\": [],\r\n \"isSystemProtected\": true,\r\n \"createdOn\": \"2018-09-20T19:03:38.8383507Z\",\r\n \"updatedOn\": \"2018-09-20T21:40:01.1354716Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments/43af7d0c-0bf8-407f-96c0-96a29d076431\",\r\n \"type\": \"Microsoft.Authorization/denyAssignments\",\r\n \"name\": \"43af7d0c-0bf8-407f-96c0-96a29d076431\"\r\n}",
"StatusCode": 200
}
],
"Names": {},
"Variables": {
"SubscriptionId": "4004a9fd-d58e-48dc-aeb2-4a4aec58606f"
}
}
75 changes: 75 additions & 0 deletions ...horization.Tests/SessionRecords/Authorization.Tests.BasicTests/DenyAssignmentGetTest.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
{
"Entries": [
{
"RequestUri": "//subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments/43af7d0c-0bf8-407f-96c0-96a29d076431?api-version=2018-07-01-preview",
"EncodedRequestUri": "Ly9zdWJzY3JpcHRpb25zLzQwMDRhOWZkLWQ1OGUtNDhkYy1hZWIyLTRhNGFlYzU4NjA2Zi9yZXNvdXJjZWdyb3Vwcy9BenVyZUF1dGh6U0RLL3Byb3ZpZGVycy9NaWNyb3NvZnQuQXV0aG9yaXphdGlvbi9kZW55QXNzaWdubWVudHMvNDNhZjdkMGMtMGJmOC00MDdmLTk2YzAtOTZhMjlkMDc2NDMxP2FwaS12ZXJzaW9uPTIwMTgtMDctMDEtcHJldmlldw==",
"RequestMethod": "GET",
"RequestBody": "",
"RequestHeaders": {
"x-ms-client-request-id": [
"db8d588e-071e-44b7-bf04-0493477d5111"
],
"accept-language": [
"en-US"
],
"User-Agent": [
"FxVersion/4.6.26020.03",
"Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.8.0.0"
]
},
"ResponseHeaders": {
"Cache-Control": [
"no-cache"
],
"Date": [
"Wed, 26 Sep 2018 23:38:41 GMT"
],
"Pragma": [
"no-cache"
],
"Server": [
"Microsoft-IIS/10.0"
],
"Set-Cookie": [
"x-ms-gateway-slice=productionb; path=/; secure; HttpOnly"
],
"x-ms-request-charge": [
"1"
],
"x-ms-request-id": [
"47b26042-3b16-4d4a-99b2-cc1b29e14958"
],
"X-Content-Type-Options": [
"nosniff"
],
"Strict-Transport-Security": [
"max-age=31536000; includeSubDomains"
],
"x-ms-ratelimit-remaining-subscription-reads": [
"11999"
],
"x-ms-correlation-request-id": [
"d5f6dad6-c763-4a6b-a6e8-33d2ca100705"
],
"x-ms-routing-request-id": [
"WESTUS2:20180926T233841Z:d5f6dad6-c763-4a6b-a6e8-33d2ca100705"
],
"Content-Length": [
"887"
],
"Content-Type": [
"application/json; charset=utf-8"
],
"Expires": [
"-1"
]
},
"ResponseBody": "{\r\n \"properties\": {\r\n \"denyAssignmentName\": \"AzureAuthzSDK_43AF7D0C-0BF8-407F-96C0-96A29D076431\",\r\n \"description\": \"Test deny assignment for AzureAuthzSDK\",\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"foo/*\"\r\n ],\r\n \"notActions\": [\r\n \"foo/*/read\"\r\n ],\r\n \"dataActions\": [\r\n \"foo/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"scope\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK\",\r\n \"doNotApplyToChildScopes\": false,\r\n \"principals\": [\r\n {\r\n \"id\": \"f8d526a054eb4941ae69ebf4a334d0f0\",\r\n \"type\": \"User\"\r\n }\r\n ],\r\n \"excludePrincipals\": [],\r\n \"isSystemProtected\": true,\r\n \"createdOn\": \"2018-09-20T19:03:38.8383507Z\",\r\n \"updatedOn\": \"2018-09-20T21:40:01.1354716Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments/43af7d0c-0bf8-407f-96c0-96a29d076431\",\r\n \"type\": \"Microsoft.Authorization/denyAssignments\",\r\n \"name\": \"43af7d0c-0bf8-407f-96c0-96a29d076431\"\r\n}",
"StatusCode": 200
}
],
"Names": {},
"Variables": {
"SubscriptionId": "4004a9fd-d58e-48dc-aeb2-4a4aec58606f"
}
}
75 changes: 75 additions & 0 deletions ...SessionRecords/Authorization.Tests.BasicTests/DenyAssignmentListForResourceGroupTest.json
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
{
"Entries": [
{
"RequestUri": "/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourceGroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments?api-version=2018-07-01-preview",
"EncodedRequestUri": "L3N1YnNjcmlwdGlvbnMvNDAwNGE5ZmQtZDU4ZS00OGRjLWFlYjItNGE0YWVjNTg2MDZmL3Jlc291cmNlR3JvdXBzL0F6dXJlQXV0aHpTREsvcHJvdmlkZXJzL01pY3Jvc29mdC5BdXRob3JpemF0aW9uL2RlbnlBc3NpZ25tZW50cz9hcGktdmVyc2lvbj0yMDE4LTA3LTAxLXByZXZpZXc=",
"RequestMethod": "GET",
"RequestBody": "",
"RequestHeaders": {
"x-ms-client-request-id": [
"4f40ccc0-f55b-4142-8378-9145ce4b9209"
],
"accept-language": [
"en-US"
],
"User-Agent": [
"FxVersion/4.6.26020.03",
"Microsoft.Azure.Management.Authorization.AuthorizationManagementClient/2.8.0.0"
]
},
"ResponseHeaders": {
"Cache-Control": [
"no-cache"
],
"Date": [
"Wed, 26 Sep 2018 23:38:40 GMT"
],
"Pragma": [
"no-cache"
],
"Server": [
"Microsoft-IIS/10.0"
],
"Set-Cookie": [
"x-ms-gateway-slice=productionb; path=/; secure; HttpOnly"
],
"x-ms-request-charge": [
"1"
],
"x-ms-request-id": [
"c0d74a93-5a3f-4974-972e-1074f1b52935"
],
"X-Content-Type-Options": [
"nosniff"
],
"Strict-Transport-Security": [
"max-age=31536000; includeSubDomains"
],
"x-ms-ratelimit-remaining-subscription-reads": [
"11999"
],
"x-ms-correlation-request-id": [
"f8c1ece2-2243-43dd-b65d-0e65fdc9c630"
],
"x-ms-routing-request-id": [
"WESTUS2:20180926T233841Z:f8c1ece2-2243-43dd-b65d-0e65fdc9c630"
],
"Content-Length": [
"1730"
],
"Content-Type": [
"application/json; charset=utf-8"
],
"Expires": [
"-1"
]
},
"ResponseBody": "{\r\n \"value\": [\r\n {\r\n \"properties\": {\r\n \"denyAssignmentName\": \"AzureAuthzSDK_43AF7D0C-0BF8-407F-96C0-96A29D076431\",\r\n \"description\": \"Test deny assignment for AzureAuthzSDK\",\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"foo/*\"\r\n ],\r\n \"notActions\": [\r\n \"foo/*/read\"\r\n ],\r\n \"dataActions\": [\r\n \"foo/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"scope\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK\",\r\n \"doNotApplyToChildScopes\": false,\r\n \"principals\": [\r\n {\r\n \"id\": \"f8d526a054eb4941ae69ebf4a334d0f0\",\r\n \"type\": \"User\"\r\n }\r\n ],\r\n \"excludePrincipals\": [],\r\n \"isSystemProtected\": true,\r\n \"createdOn\": \"2018-09-20T19:03:38.8383507Z\",\r\n \"updatedOn\": \"2018-09-20T21:40:01.1354716Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/resourcegroups/AzureAuthzSDK/providers/Microsoft.Authorization/denyAssignments/43af7d0c-0bf8-407f-96c0-96a29d076431\",\r\n \"type\": \"Microsoft.Authorization/denyAssignments\",\r\n \"name\": \"43af7d0c-0bf8-407f-96c0-96a29d076431\"\r\n },\r\n {\r\n \"properties\": {\r\n \"denyAssignmentName\": \"AzureAuthzSDK_22704996-FBD0-4AB1-8625-722D897825D2\",\r\n \"description\": \"Test deny assignment for AzureAuthzSDK\",\r\n \"permissions\": [\r\n {\r\n \"actions\": [\r\n \"foo/*\"\r\n ],\r\n \"notActions\": [\r\n \"foo/*/read\"\r\n ],\r\n \"dataActions\": [\r\n \"foo/*\"\r\n ],\r\n \"notDataActions\": []\r\n }\r\n ],\r\n \"scope\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f\",\r\n \"doNotApplyToChildScopes\": false,\r\n \"principals\": [\r\n {\r\n \"id\": \"f9e08843d2b74dbca5845e88a7e229a6\",\r\n \"type\": \"Group\"\r\n }\r\n ],\r\n \"excludePrincipals\": [],\r\n \"isSystemProtected\": true,\r\n \"createdOn\": \"2018-09-20T20:32:31.7438709Z\",\r\n \"updatedOn\": \"2018-09-20T21:40:03.4634449Z\",\r\n \"createdBy\": null,\r\n \"updatedBy\": null\r\n },\r\n \"id\": \"/subscriptions/4004a9fd-d58e-48dc-aeb2-4a4aec58606f/providers/Microsoft.Authorization/denyAssignments/22704996-fbd0-4ab1-8625-722d897825d2\",\r\n \"type\": \"Microsoft.Authorization/denyAssignments\",\r\n \"name\": \"22704996-fbd0-4ab1-8625-722d897825d2\"\r\n }\r\n ]\r\n}",
"StatusCode": 200
}
],
"Names": {},
"Variables": {
"SubscriptionId": "4004a9fd-d58e-48dc-aeb2-4a4aec58606f"
}
}
Loading

0 comments on commit ae10de6

Please sign in to comment.